The browser agent can use existing logins to read and type on pages, navigate, click links, and fill forms; it can also automatically approve actions judged safe by a classifier that checks them against the original request. Anthropic says the setting can be switched back to manual approval, while Enterprise admins can restrict use to approved domains. The company reports zero successful attacks in its current evaluation for Sonnet 5 and Opus 5 with probes plus the automatic-approval classifier, and a 0.3% success rate for Fable 5; it also says prompt injection remains an evolving threat.
Raw SignalSep 22, 20261 min read1 source
Claude in Chrome is generally available
In one minute
Anthropic has made Claude in Chrome generally available on every paid Claude plan.